Data Privacy Senior Consultant - Manager

Protiviti India; Chennai District, Coimbatore District, Bengaluru; On-site; INR 900,000 - 1,300,000; Full time

Job summary

Protiviti India in Chennai is seeking a privacy professional to design and implement privacy frameworks aligned with GDPR, IDPR, CCPA and other standards. You will map regulatory requirements for data controllers and processors, perform PIA/DPIA, and develop policies, data classification guides, and data flow maps.

You will assess applications, vendors, and services for privacy compliance, provide remediation recommendations, support incident management, and train staff on data privacy best

Responsibilities

• Create privacy framework based on GDPR, IDPR, CCPA, and other standards.
• Map regulatory requirements for data controller and data processor roles.
• Conduct PIA and DPIA to assess privacy risks.
• Create and update security and privacy policies, procedures, and notices.
• Assess applications, vendors, infrastructure, cloud services for privacy compliance.
• Provide remediation recommendations including technical solutions.
• Support privacy incident management and mitigation planning.
• Prepare training material and train staff on data privacy practices.
• Develop data classification guidelines and data flow maps.
• Implement data leakage prevention tools as per requirements.
• Provide assurance on DLP and related monitoring and investigations.
• Assist in inventorying sensitive information across audiences.

Job description

Roles and responsibilities:

• To create privacy framework based on compliance requirements like GDPR, IDPR, CCPA, ADHICS, CCPA, etc.
• To map regulatory requirements as per the requirements of data controller" and “data processor”
• To conduct Privacy Impact Assessment (PIA) and Data Privacy Impact Assessment (DPIA)
• To create and update security & privacy policies, procedures, good practices and notices.
• To assess applications, vendors, infrastructure, cloud services and processes for compliance as per security and privacy requirement
• To provide remediation recommendations including technical solutions regarding the gaps identified
• To provide support for privacy related incident management process, recommendations to incidents, to help in preparation of mitigation plan and to provide support in closing the incident.
• To prepare training material and provide training about maintaining required data privacy standards while collecting, storing, processing and destruction of data.
• To help with the development of data classification guidelines
• To create policies for data classification and classify data as per the data classification guidelines.
• To understand the business, to analyze the data life cycle and accordingly create data flow maps.
• To implement data leakage prevention tool based on defined business, security and regulatory requirements.
• To provide assurance regarding Data Loss Prevention and other monitoring tools, efforts and related investigations and remediation actions
• To assist in the process of identification and creation of inventory of sensitive information that is being stored, processed, or transmitted internally and to a variety of audiences, including customers, vendors, employees, etc.